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DETAILED ACTION 

1 . Claims 1 -20 are pending for consideration. 

Information Disclosure Statement 

2. The information disclosure statement (IDS) submitted on 02/09/2004 is being 
considered by the examiner. 

Claim Objections 

3. Claims 9 and 1 9 are objected to because of the following informalities: 
The term "storage medium readable" is not supported in the applicant's 

specification. The only term that has a close relationship with the term "storage medium 
readable" is "computer readable medium". 

Regarding claim 19, "authentication information, and" should be changed to 
"authentication information and". 

Appropriate correction is required. 

Claim Rejections - 35 USC § 101 

4. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

5. Claims 9-14 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 
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Claim 9 is directed to a storage medium readable having stored instructions for 
execution by the processing circuit. According to the specification, paragraph 0079, "a 
computer readable medium is used to generally refer to media such as main 
memory... hard disk... and signals (e.g., carrier waves, infrared signals, digital signals, 
etc.)". In light of the specification, this claim does not fall within one of the four statutory 
classes of an invention (method/process, article of manufacture, a composition of 
matter, or machine). Carrier wave is a signal, not a series of steps. Carrier wave is a 
form of energy and not a composition of matter. Carrier wave does not have any 
physical structure, does not itself perform any useful, concrete and tangible result and 
thus does not fit within the definition of a machine or an article of manufacture. 

The dependent claims are depended on the rejected base claim, and are 
rejected for the same rationales. 



Double Patenting 

6. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, All 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 
USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321 (c) or 1 .321 (d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
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be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1 , 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 

7. Claims 1-20 are rejected on the ground of nonstatutory obviousness-type double 
patenting as being unpatentable over claims 1-19 of U.S. Patent No. 7136490. 
Although the conflicting claims are not identical, they are not patentably distinct from 
each other because claim 1-20 of the instant application are anticipated by the patent 
claims 1-19 in that claims 1-19 of the patent contain all the limitations of claim 1-20 of 
the instant application. Please see Claim Comparison Table of the certain claims 



below. 



Instant Application 10774723 


Patent 7136490 


Claims 1, 9 and 15. 

A method for managing authentication 
information for a user, the method 
comprising the steps of: receiving a master 
digital key from the user; obtaining 
authentication of the user based on the 
master digital key; receiving from the user 
a selection of one identity from among a 
plurality of identities that are stored for the 
user; and providing authentication 
information for the user into an application 
or web page based on the one identity 
selected by the user. 


Claims 1, 7 and 13. 

A method within a computing platform of 
graphically providing a secure field value 
retrieval and entry, wherein said 
computing platform includes a display 
device, a field activation device and a user 
selection device, said method comprising: 
providing to a plurality of application 
programs an interface to request 
application-specific passwords, said 
plurality of application programs including 
at least one web browser program, and at 
least one non-browser program; receiving 
a request from an application program via 
said interface for input of an application- 
specific password; receiving a computing 
context indicator regarding at least a 
position of an original entry point for a 
password as displayed by said requesting 
application program; displaying a user first 
dialogue to receive a master key value 
from a user, said user dialogue being 
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displayed in a position so as to overlay 
said original entry point for a password as 
displayed by said requesting application 
program; determining if said master key 
value is a correct master key value; 
retrieving a plurality of field values from a 
secure field value store which are 
associated with said requesting application 
program, said activated field and a user 
identification; displaying to a user a 
second dialogue to receive a selection by 
said user from said retrieved plurality of 
field values; and automatically entering 
said selected field value into said original 
entry point for said requesting application 
program. 


Claim 2. 

The method of claim 1 , wherein the 
providing step comprises the sub-steps of: 
recognizing a web page for which 
authentication information is stored; and 
automatically filling the authentication 
information for the user into appropriate 
elements of the web page. 

Claim 3. 

The method of claim 1 , wherein the 
providing step comprises the sub-steps of: 
providing the user with a list of web pages 
for which authentication information is 
stored; receiving from the user a selection 
of one web page from the list of web 
pages; and automatically opening the one 
web page selected by the user, and filling 
the authentication information for the user 
into appropriate elements of the web page. 


Claim 6. 

The method as set forth in claim 1 wherein 
said step of automatically entering said 
retrieved field value into said activated 
field comprises automatically entering a 
password value. 

Claim 4. 

The method as set forth in claim 1 wherein 
said step of retrieving a field value from a 
secure field value store which correlates to 
a computing context comprises retrieving a 

HcHJ VdlUt; WIIIUII lb dooUL/ldLtJU WILM d WcU 

site. 
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Claim Rejections - 35 USC § 102 

8. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

9. Claims 1-20 are rejected under 35 U.S.C. 102(b) as being anticipated by Nielsen 
(US 6182229) (hereinafter Nielsen). 

Regarding claim 1 , Nielsen discloses a method for managing authentication 
information for a user, the method comprising the steps of: receiving a master digital 
key from the user (Nielsen: See Abstract section and column 6 lines 18-24: only the 
master password need be remembered); obtaining authentication of the user based on 
the master digital key (Nielsen: See figure 2, column 3 line 64 through column 4 line 1 1 
and column 4 lines 33-38 and lines 52-59); receiving from the user a selection of one 
identity from among a plurality of identities that are stored for the user (Nielsen: See 
figure 2 and column 4 lines 12-29); and providing authentication information for the user 
into an application or web page based on the one identity selected by the user (Nielsen: 
See figure 3, column 5 lines 17-24 and column 6 lines 18-24). 

Regarding claims 2, 10 and 16, Nielsen discloses wherein the providing step 
comprises the sub-steps of: recognizing a web page for which authentication 
information is stored (Nielsen: See figure 3 and column 4 lines 52-59); and 
automatically filling the authentication information for the user into appropriate elements 
of the web page (Nielsen: See figure 3 and column 4 lines 52-59). 
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Regarding claims 3, 11 and 17, Nielsen discloses wherein the providing step 
comprises the sub-steps of: providing the user with a list of web pages for which 
authentication information is stored (Nielsen: See figure 2); receiving from the user a 
selection of one web page from the list of web pages (Nielsen: See column 4 lines 1 2- 
28); and automatically opening the one web page selected by the user, and filling the 
authentication information for the user into appropriate elements of the web page 
(Nielsen: column 4 lines 52-59). 

Regarding claims 4, 12 and 18, Nielsen discloses the steps of: receiving an 
address of a web page from the user (Nielsen: column 5 lines 17-24); downloading and 
analyzing the web page in order to determine what authentication information is 
required by the web page (Nielsen: See figure 3); presenting the user with a list of the 
authentication information that is required by the web page (Nielsen: See figure 2); and 
storing authentication information entered by the user in response to the list (Nielsen: 
See figure 2). 

Regarding claims 5, 13 and 19, Nielsen discloses the steps of: recognizing a web 
page that requires authentication information (Nielsen: See figure 3 and column 6 lines 
18-24); and storing authentication information entered into the web page by the user 
(Nielsen: See Summary section). 

Regarding claim 6, Nielsen discloses wherein the authentication information 
provided for the user includes a complete state of the web page, including states of any 
checkboxes and radio buttons (Nielson: column 5 lines 42-62). 
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Regarding claims 7 and 14, Nielson discloses wherein two of the identities store 
different authentication information for the user for the same application or web page 
(Nielsen: See figure 2). 

Regarding claims 8 and 20, Nielson discloses wherein in the step of providing 
authentication information for the user, the authentication information for the user is 
provided to a web page on behalf of a third party application without allowing the third 
party application access to the authentication information (Nielsen: See figure 3, column 
4 lines 52-59 and column 6 lines 18-24). 

Regarding claim 9, this claim has limitations that is similar to those of claim 1 , 
thus it is rejected with the same rationale applied against claim 1 above. 

Regarding claim 1 5, this claim has limitations that is similar to those of claim 1 , 
thus it is rejected with the same rationale applied against claim 1 above. 

Conclusion 

10. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Hu discloses automatic log-in processing and password management 
system for multiple target web sites (US 20040158746). 

b. Ong discloses system for identity management and fortification of 
authentication (US 20040117662). 

c. Lu discloses method and system of facilitating automatic login to a web 
site using an internet browser (US 20020186249). 
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d. Pearce discloses method for automatically filling in web forms (US 
7185272). 

e. Dupouy discloses secure digital key for automatic login (US 
20050033968). 

f. Khavari discloses method and apparatus for providing automation to 
internet navigation application (US 7200804). 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to TRANG DOAN whose telephone number is (571)272- 
0740. The examiner can normally be reached on Monday-Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571 ) 272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

a. D.I 

Examiner, Art Unit 2131 
/Ayaz R. Sheikh/ 

Supervisory Patent Examiner, Art Unit 2131 



